Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
File: qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft (raw, json)
Hash identifier: CWsKogM/L88LvQvl92UDKnELNjweFJsBXKxqDzdja5g=
Subject key identifier: D6:58:17:BD:43:B8:94:E1:84:61:6C:F2:D0:05:B7:1B:A5:85:27:15
Authority key identifier: A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
Certificate issuer: /CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Certificate serial: 01967D8ED9FF477A3FE07F5E5F82622A79A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
Manifest number: 027E
Signing time: Mon 28 Apr 2025 18:00:35 +0000
Manifest this update: Mon 28 Apr 2025 18:00:35 +0000
Manifest next update: Tue 29 Apr 2025 18:00:35 +0000
Files and hashes: 1: Pdk1L9w3iAsdUTSgBaCMpP43Lfc.roa (hash: l+PHwAcEJ9+JdHW+J9w4HmPhehTBZx7nVK+BVTGzJcs=)
2: qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl (hash: zseHtDzFNn3OSY829s757apw3ijygO8dAV5FaDh6L5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:d9:ff:47:7a:3f:e0:7f:5e:5f:82:62:2a:79:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85db8c9b56308cf089021b516cae4c55fd64fe4
Validity
Not Before: Apr 28 18:00:35 2025 GMT
Not After : Apr 29 18:00:35 2025 GMT
Subject: CN=d65817bd43b894e184616cf2d005b71ba5852715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:a6:8e:17:27:17:c6:d2:00:c8:24:86:f6:
ba:27:78:a3:31:9c:ea:7d:8a:2c:ef:7c:a6:8d:1c:
80:e4:9d:0d:e9:79:d0:37:c3:b6:b0:b8:bc:32:22:
20:19:41:e4:de:27:0c:59:a4:d2:71:ad:d0:1f:f4:
ba:04:93:21:1e:58:91:7c:f4:2e:0c:a5:ac:ae:e3:
b2:d7:7a:fa:43:af:0d:8c:2c:15:36:0c:05:0b:80:
fa:1e:60:0c:7c:53:f5:e5:cb:b0:0d:8d:9f:9d:37:
d0:a1:ed:bf:25:38:fd:ff:e5:d3:38:4b:12:9f:a0:
5c:e7:55:2b:a0:5a:82:c5:d7:2f:bc:65:69:be:4b:
4e:e3:c2:26:9d:64:c7:e2:73:b5:62:d9:c5:e1:cf:
c0:d9:1a:03:56:31:4d:8a:a7:d4:ef:1c:c2:c4:db:
7e:e6:2d:a2:59:fa:9a:90:ab:78:6a:ff:24:3f:6a:
f7:c9:80:24:c9:81:df:93:2f:f3:3c:3a:0a:95:94:
a5:c6:95:03:b1:4b:19:7e:c7:0a:af:72:0c:ed:0a:
08:53:ab:be:94:46:55:84:5b:40:3b:4f:34:db:15:
e7:8c:1e:53:c4:34:91:33:20:38:08:82:53:67:92:
ec:10:a1:46:2c:7b:56:df:b6:73:d5:f2:71:be:ea:
6b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:58:17:BD:43:B8:94:E1:84:61:6C:F2:D0:05:B7:1B:A5:85:27:15
X509v3 Authority Key Identifier:
keyid:A8:5D:B8:C9:B5:63:08:CF:08:90:21:B5:16:CA:E4:C5:5F:D6:4F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF24ybVjCM8IkCG1FsrkxV_WT-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/638109-b320-45a1-906e-60f49d123173/1/qF24ybVjCM8IkCG1FsrkxV_WT-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:52:7b:e9:df:86:ce:40:a0:55:6b:0f:4c:7a:b9:50:e9:d0:
e7:92:50:56:3a:de:16:74:3d:3e:8d:74:1f:3c:d2:1e:7d:64:
7e:55:dc:39:d8:0b:79:59:7d:fd:bd:2c:b3:cb:5a:46:50:f7:
fb:05:00:5e:dc:dc:92:76:d7:4c:91:f1:d1:86:4f:3a:22:63:
f4:49:e3:98:64:dc:78:75:b5:45:9a:45:00:86:da:2a:e2:86:
de:08:d6:da:f3:51:00:7d:a0:55:9b:e1:f2:60:e6:27:8f:35:
52:ac:18:32:0b:a9:db:98:79:a4:b6:12:85:d1:9e:4c:7b:aa:
4e:c1:db:de:f8:f3:6e:f5:a5:76:e8:ad:ea:03:f3:c4:4f:6b:
cd:0e:29:70:54:21:3f:ce:b7:3e:cd:a0:06:2a:b2:86:65:a9:
e4:40:fb:c3:ce:54:65:83:e1:60:64:53:d1:61:38:e1:8d:dc:
a8:f7:fd:43:2a:c5:26:8c:06:20:ce:a2:e4:53:96:8c:5c:a4:
0d:a5:b6:ab:da:cf:9d:4c:7f:35:8c:5e:5b:f7:33:15:fc:8f:
9d:0b:87:03:42:f1:59:42:7e:12:cc:91:1c:1a:78:1e:08:93:
0e:42:9b:90:2c:1d:c6:bf:23:20:e6:8c:eb:3c:37:1d:20:7d:
a3:21:83:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:41:12 2025 by rpki-client